Technical Documentation

profile

Syntax

profile profile-name {
authentication-order [ authentication-methods ];
accounting {
accounting-stop-on-access-deny;
accounting-stop-on-failure;
order [ accounting-method ];
statistics (time | volume-time);
update-interval minutes;
}
radius {
authentication-server [ ip-address ];
accounting-server [ ip-address ];
options {
accounting-session-id-format (decimal | description);
ethernet-port-type-virtual;
interface-description-format [sub-interface | adapter];
nas-identifier identifier-value;
nas-port-extended-format {
adapter-width width;
port-width width;
slot-width width;
stacked-vlan-width width;
vlan-width width;
}
override-nas-information;
revert-interval interval;
vlan-nas-port-stacked-format;
}
attributes {
ignore {
framed-ip-netmask;
input-filter;
logical-system:routing-instance;
output-filter;
}
exclude
accounting-authentic [ accounting-on | accounting-off ];
accounting-delay-time [ accounting-on | accounting-off ];
accounting-session-id [ access-request | accounting-on | accounting-off | accounting-stop ];
accounting-terminate-cause [ accounting-off ];
called-station-id [ access-request | accounting-start | accounting-stop ];
calling-station-id [ access-request | accounting-start | accounting-stop ];
class [ accounting-start | accounting-stop ];
dhcp-gi-address [ access-request | accounting-start | accounting-stop ];
dhcp-mac-address [ access-request | accounting-start | accounting-stop ];
output-filter [ accounting-start | accounting-stop ];
event-timestamp [ accounting-on | accounting-off | accounting-start | accounting-stop ];
framed-ip-address [ accounting-start | accounting-stop ];
framed-ip-netmask [ accounting-start | accounting-stop ];
input-filter [ accounting-start | accounting-stop ];
input-gigapackets [ accounting-stop ];
input-gigawords [ accounting-stop ];
interface-description [ access-request | accounting-start | accounting-stop ];
nas-identifier [ access-request | accounting-on | accounting-off | accounting-start | accounting-stop ];
nas-port [ access-request | accounting-start | accounting-stop ];
nas-port-id [ access-request | accounting-start | accounting-stop ];
nas-port-type [ access-request | accounting-start | accounting-stop ];
output-gigapackets [ accounting-stop ];
output-gigawords [ accounting-stop ];
}
}
}
radius-server server-address {
accounting-port port-number;
port port-number;
retry attempts;
routing-instance routing-instance-name;
secret password;
timeout source-address;
timeout seconds;
}
}

Hierarchy Level

[edit access]

Release Information

Statement introduced before JUNOS Release 7.4.

Description

Configure an access profile and its subscriber access properties.

The remaining statements are explained separately.

Note: This topic describes the profile statement options for subscriber access management. See the JUNOS System Basics Configuration Guide for a complete description of the profile statement.

Required Privilege Level

admin—To view this statement in the configuration.

admin-control—To add this statement to the configuration.


Published: 2009-07-16